galette kayıtları
galette üreticisine ait 10 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %40
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-863 Incorrect Authorization3
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-269 Improper Privilege Management1
- CWE-87 Improper Neutralization of Alternate XSS Syntax1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
- CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
10 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2021-41262İstismar yok | SQL Injection in Galettegalette · galette · CWE-89 | Yüksek8,8 | — | %1,1 | 16 Ara 2021 |
35İzleyin | CVE-2021-41260İstismar yok | Missing CSRF checks in Galettegalette · galette · CWE-352 | Yüksek8,8 | — | %0,4 | 16 Ara 2021 |
30İzleyin | CVE-2024-24761İstismar yok | Galette public pages accessibility restrictiongalette · galette · CWE-863 | Yüksek7,5 | — | %0,6 | 6 Mar 2024 |
21İzleyin | CVE-2021-21319İstismar yok | Galette is a membership management web application geared towards non profit organizations.galette · galette · CWE-79 | Orta5,4 | — | %0,9 | 25 Eki 2021 |
21İzleyin | CVE-2025-48884İstismar yok | Galette is vulnerable to XSS through Document Typegalette · galette · CWE-80 | Orta5,3 | — | %0,2 | 4 Kas 2025 |
21İzleyin | CVE-2025-48076İstismar yok | Galette is vulnerable to Cross-site Scriptinggalette · galette · CWE-87 | Orta5,3 | — | %0,2 | 4 Kas 2025 |
19İzleyin | CVE-2021-41261İstismar yok | Stored Cross-site Scripting in Galettegalette · galette · CWE-79 | Orta4,8 | — | %0,6 | 16 Ara 2021 |
19İzleyin | CVE-2025-58053İstismar yok | Galette has a privilege escalation vulnerabilitygalette · galette · CWE-269 | Orta4,9 | — | %0,3 | 19 Ara 2025 |
8İzleyin | CVE-2025-58052İstismar yok | Galette has groups managers access control bypass on Membersgalette · galette · CWE-863 | Düşük2,1 | — | %0,3 | 19 Ara 2025 |
5İzleyin | CVE-2025-53922İstismar yok | Galette has access control bypassgalette · galette · CWE-863 | Düşük1,3 | — | %0,2 | 19 Ara 2025 |
- CVE-2021-4126235İzleyin
SQL Injection in Galette
YüksekCVSS 8,8İstismar yokEPSS %1galette · galette16 Ara 2021
- CVE-2021-4126035İzleyin
Missing CSRF checks in Galette
YüksekCVSS 8,8İstismar yokEPSS %0galette · galette16 Ara 2021
- CVE-2024-2476130İzleyin
Galette public pages accessibility restriction
YüksekCVSS 7,5İstismar yokEPSS %1galette · galette6 Mar 2024
- CVE-2021-2131921İzleyin
Galette is a membership management web application geared towards non profit organizations.
OrtaCVSS 5,4İstismar yokEPSS %1galette · galette25 Eki 2021
- CVE-2025-4888421İzleyin
Galette is vulnerable to XSS through Document Type
OrtaCVSS 5,3İstismar yokEPSS %0galette · galette4 Kas 2025
- CVE-2025-4807621İzleyin
Galette is vulnerable to Cross-site Scripting
OrtaCVSS 5,3İstismar yokEPSS %0galette · galette4 Kas 2025
- CVE-2021-4126119İzleyin
Stored Cross-site Scripting in Galette
OrtaCVSS 4,8İstismar yokEPSS %1galette · galette16 Ara 2021
- CVE-2025-5805319İzleyin
Galette has a privilege escalation vulnerability
OrtaCVSS 4,9İstismar yokEPSS %0galette · galette19 Ara 2025
- CVE-2025-580528İzleyin
Galette has groups managers access control bypass on Members
DüşükCVSS 2,1İstismar yokEPSS %0galette · galette19 Ara 2025
- CVE-2025-539225İzleyin
Galette has access control bypass
DüşükCVSS 1,3İstismar yokEPSS %0galette · galette19 Ara 2025